Stealthier Inter-packet Timing Covert Channels

Abstract : Covert channels aim to hide the existence of communication. Recently proposed packet-timing channels encode covert data in inter-packet times, based on models of inter-packet times of normal traffic. These channels are detectable if normal inter-packet times are not independent identically-distributed, which we demonstrate is the case for several network applications. We show that ~80% of channels are detected with a false positive rate of 0.5%. We then propose an improved channel that is much harder to detect. Only ~9% of our new channels are detected at a false positive rate of 0.5%. Our new channel uses packet content for synchronisation and works with UDP and TCP traffic. The channel capacity reaches over hundred bits per second depending on overt traffic and network jitter.
Type de document :
Communication dans un congrès
Jordi Domingo-Pascual; Pietro Manzoni; Sergio Palazzo; Ana Pont; Caterina Scoglio. 10th IFIP Networking Conference (NETWORKING), May 2011, Valencia, Spain. Springer, Lecture Notes in Computer Science, LNCS-6640 (Part I), pp.458-470, 2011, NETWORKING 2011. 〈10.1007/978-3-642-20757-0_36〉
Liste complète des métadonnées

Littérature citée [22 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/hal-01583422
Contributeur : Hal Ifip <>
Soumis le : jeudi 7 septembre 2017 - 11:58:07
Dernière modification le : jeudi 7 septembre 2017 - 15:24:22

Fichier

978-3-642-20757-0_36_Chapter.p...
Fichiers produits par l'(les) auteur(s)

Licence


Distributed under a Creative Commons Paternité 4.0 International License

Identifiants

Citation

Sebastian Zander, Grenville Armitage, Philip Branch. Stealthier Inter-packet Timing Covert Channels. Jordi Domingo-Pascual; Pietro Manzoni; Sergio Palazzo; Ana Pont; Caterina Scoglio. 10th IFIP Networking Conference (NETWORKING), May 2011, Valencia, Spain. Springer, Lecture Notes in Computer Science, LNCS-6640 (Part I), pp.458-470, 2011, NETWORKING 2011. 〈10.1007/978-3-642-20757-0_36〉. 〈hal-01583422〉

Partager

Métriques

Consultations de la notice

10

Téléchargements de fichiers

3